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ABSTRACT : 

A computer implemented online music distribution system provides for the secure 
delivery of audio data and related media, including text and images, over a public 
communications network. The online music distribution system provides security 
through multiple layers of encryption, and the cryptographic binding of purchased 
audio data to each specific purchaser. The online music distribution system also 
provides for previewing of audio data prior to purchase. In one embodiment, the 
online music distribution system is a client-server system including a content 
manager, a delivery server, and an HTTP server, communicating with a client system 
including a Web browser and a media player. The content manager provides for 
management of media and audio content, and processing of purchase requests. The 
delivery server provides delivery of the purchased media data. The Web browser and 
HTTP server provide a communications interface over the public network between the 
content manager and media players. The media player provides for encryption of user 
personal information, and for decryption and playback of purchased media data. 
Security of purchased media data is enhanced in part by the use of a personal. 
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digital passport in each media player. The digital passport contains identifying 
information that identifies the purchaser, along with confidential information, such 
as credit card number, and encryption data, such as the media player's public and 
private keys. The media player encryption data is used to encrypt purchased media 
data, which is decrypted in real time by the media player. The media player also 
displays confidential information, such as the purchaser's credit card number, 
during playback. 
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Detailed Description Text (141) : 

When a received media data file 200 is to be played back 964 (either immediately or 
at a later time), the consumer's passphrase is entered. The media player 116 
extracts the encrypted registration key 420 from the passport 400 and decrypts it 
with the passphrase. The media player 116 then extracts the encrypted private key 
412 from the passport 400 and decrypts it with the registration key 420. The media 
player 116 then decrypts the media key with the consumer's private key 412. Finally, 
the media key is then used to decrypt the audio image 208 in real-time as the media 
is played. 



